Quantum Error Models and Error Mitigation 
for Long-Distance Teleportation Architectures 

Jeffrey H. Shapiro, Joe Aung, and Brent J. Yen 
Research Laboratory of Electronics 
Massachusetts Institute of Technology, 
Cambridge, MA 02139 
(Dated: February 1, 2008) 

Abstract 

A quantum communication architecture is being developed for long-distance, high-fidelity qubit 
teleportation. It uses an ultrabright narrowband source of polarization-entangled photons, plus 
trapped-atom quantum memòries, and it is compatible with long-distance transmission over Stan- 
dard telecommunication fiber. This paper reports error models for the preceding teleportation 
architecture, and for an extension thereto which enables long-distance transmission and storage of 
Greenberger-Horne-Zeilinger states. The use of quantum error correction or entanglement purifica- 
tion to improve the performance of these quantum communication architectures is also discussed. 
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I. INTRODUCTION 



A team of researchers from the Massachusetts Institute of Technology (MIT) and North- 
western University (NU) has proposed a quantum communication architecture [Q that per- 
mits long-distance high-fidehty teleportation using the Bennett et al. singlet-state protocol 
0. This architecture uses a novel ultrabright source of polarization-entangled photon pairs 
and trapped-atom quantum memòries ^ in which all four Bell states can be measured. 
By means of quantum-state frequency conversion and time-division multiplexed polariza- 
tion restoration, it is able to employ Standard telecommunication fiber for long-distance 
transmission of the polarization-entangled photons. An extension of the MIT/NU archi- 
tecture enables long-distance transmission and storage of the Greenberger-Horne-Zeilinger 
(GHZ) states that are needed for quantum secret sharing protocols. In this paper, we report 
quantum-communication error models for the MIT/NU architectures, and we describe the 
use of quantum error correction or entanglement purification to improve the robustness of 
these quantum transmission systems. 

II. MIT/NU COMMUNICATION ARCHITECTURE 

The notion that singlet states could be used to teleport a qubit is due to Bennett 
et al. 1^. The transmitter and the receiver stations share the entangled qubits of a 
singlet state, |í/'~)t_r = (|0)T|l)fí — |1)t|0)í?)/v^, and the transmitter then accepts a 
message qubit, |í/')m = «10) aí + P\'^)m, leaving the message mode, the transmitter, 
and the receiver in the joint state {ip) m\'íP~)tr· Making the Bell-state measurements, 
{|^^)mt = (|1)m|0)t ± \0)m\1)t)/V2, |0±)mt = (|1)aí|1)t ± |0)m|0)t)/v^}, on the joint 
message/transmitter system then yields the two bits of classical Information that the receiver 
needs to transform its portion of the original singlet into a reproduction of the message qubit. 

An initial experimental demonstration of teleportation using singlet states was performed 
by Bouwmeester et al. 0,0, but only one of the Bell states was measured, the demonstra- 
tion was a table-top experiment, and it did not include a quantum memory. The MIT/NU 
proposal for a singlet-based quantum communication system, which is shown in Fig. reme- 
dies all of these limitations. It uses an ultrabright source of polarization-entangled photon 
pairs, formed by combining the outputs from two coherently-pumped, type-II phase-matched 
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FIG. 1: Schematic of long-distance quantum communication system: P = ultrabright narrowband 
source of polarization-entangled photon pairs; L = Lkm of Standard telecommunications fiber; M 
= trapped-atom quantum memory. 
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FIG. 2: Essential components of the singlet-state quantum communication system from Fig. 1. 
(a) Energy level diagram of the trapped rubidium atom quantum memory. The A-to-B transition 
occurs when a photon is absorbed. The B-to-D transition is coherently driven to enable storage 
in the long-hved D levels. The ^-to-C cychng transition is used for nondestructive verification 
of a loading event. (b) Ultrabright narrowband source of polarization-entangled photon pairs. 
The polarizations x and y are denoted by arrows and bullets, respectively; PBS=polarizing beam 
splitter. 

optical parametric amplifiers on a polarizing beam splitter. It transmits one photon from 
each pair down Standard telecommunication fibers to a pair of trapped ^^Rb-atom quantum 
memòries for storage and processing of this entanglement. One of these memòries serves 
as the transmitter station and the other as the receiver station for qubit teleportation. We 
will devote the rest of this section to describing these bàsic components and their operation 
within the MIT/NU quantum communication architecture. 
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FIG. 3: Schematic diagram of quantum-state frequency conversion: a strong pump beam at 
1570 nm converts a qubit photon received at 1608 nm (in the low-loss fiber transmission window) 
to a qubit photon at the 795 nm wavelength of the ®^Rb quantum memory. 

A. Ultrabright Source of Polarization-Entangled Photons 

Polarization-entangled photons are transmitted from the source over Lkm of Standard 
optical fiber to be loaded in trapped-atom quantum memòries. The quantum memòries in 
the system require a source of entangled photons at 795 nm to match the cavity hnewidth 
of the trapped-atom cavities. The Standard source for generating polarization-entangled 
photons is the parametric downconverter. It is so broadband (~10^^Hz), however, that its 
pair-generation rate in the narrow bandwidth needed for coupling into the rubidium atom 
is extremely low: ~15pairs/sec in a 30 MHz bandwidth. The P block in Fig. |I| represents 
an ultrabright narrowband source 0, which is capable of producing 1.5 x lO^pairs/sec in 
a 30 MHz bandwidth by combining the signal and idler output beams from two doubly 
resonant type-II phase matched OPAs, as sketched in Fig. 0(b). 

Quasi-phase-matched nonlinear materials make it possible to realize a wavelength, for our 
polarization-entanglement source, that is appropriate for a specific application. In particular, 
by using periodically-poled potassium titanyl phosphate (PPKTP), a quasi-phase-matched 
type-II nonlinear material, we can produce ~10^pairs/sec at the 795 nm wavelength of the 
rubidium memory for direct memory- loading (i.e., local-storage) applications. For long- 
distance transmission to remotely located memòries, we can use a different PPKTP crystal 
and pump wavelength to generate lO^pairs/sec in the 1.55 /im wavelength low-loss fiber 
transmission window. After fiber propagation we shift the entanglement to the 795 nm 
wavelength needed for the rubidium-atom memory via quantum-state frequency conversion 



shown in Fig. |. 
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B. Quantum-State Transmission over Fiber 

Successful singlet transmission requires that polarization not be degraded by the propa- 
gation process. Yet, propagation through Standard telecommunication fiber produces ran- 
dom, slowly-varying (~msec time scale) polarization variations, so a means for polarization 
restoration is required. The approach taken for polarization restoration in the MIT/NU 
architecture, shown schematically in Fig. ^, relies on time-division multiplexing (TDM). 
Time slices from the signal beams from the two OPAs are sent down one fiber in the same 
linear polarization but in nonoverlapping time slots, accompanied by a strong out-of-band 
pulse. By tracking and restoring the linear polarization of the strong pulse, we can restore 
the linear polarization of the signal-beam time slices at the far end of the fiber. After this 
linear-polarization restoration, we then reassemble a time-epoch of the full vector signal 
beam by delaying the first time slot and combining it on a polarizing beam splitter with the 
second time slot after the latter has had its linear polarization rotated by 90°. A similar 
procedure is performed to reassemble idler time-slices after they have propagated down the 
other fiber. This approach, which is inspired by the Bergman et al. two-pulse fiber-squeezing 
experiment 0, common-modes out the vast majority of the phase fiuctuations and the po- 
larization birefringence incurred in the fiber, permitting Standard telecommunication fiber 
to be used in lieu of the lossier and much more expensive polarization-maintaining fiber. 

C. Trapped-Atom Quantum Memory 

Each M block in Fig. ^ is a quantum memory in which a single ultra-cold ^^Rb atom 
(~6 MHz linewidth) is confined by a far-off-resonance làser trap in an ultra-high-vacuum 
chamber with cryogenic walls within a high-finesse (~15 MHz linewidth) single-ended op- 
tical cavity. This memory can absorb a 795 nm photon, in an arbitrary polarization state, 
transferring the qubit from the photon to the degenerate B levels of Fig. |^(a) and thence 
to long-lived storage levels, by coherently driving the B-to-D transitions. (We are using ab- 
stract symbols here for the hyperfine levels of rubidium; see IQ for the actual atòmic levels 
involved as well as a complete description of the memory and its operation.) With a liquid 
helium cryostat, so that the background pressure is less than 10~^'^Torr, the expected life- 
time of the trapped rubidium atom will be more than an hour. Fiuctuations in the residual 
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FIG. 4: Transmission of time-division multiplexed signal beams from OPAs 1 and 2 through an 
optical fiber. Ap = pilot pulse, WDM MUX = wavelength-division multiplexer, WDM DEMUX = 
wavelength-division demultiplexer, HWP = half-wave plate. 



magnètic field, however, will probably limit the atom's decoherence time to a few minutes. 

By using optically off-resonant Raman (OOR) transitions, the Bell states of two àtoms in 
a single vacuum-cliamber trap can be converted to superposition states of one of the àtoms. 
All four Bell measurements can then be made, sequentially, by detecting the presence (or 
absence) of fluorescence as an appropriate sequence of OOR làser pulses is applied to the 
latter atom 0]. The Bell-measurement results in one memory can be sent to a distant 
memory, where at most two additional OOR pulses are needed to complete the Bennett et 
al. state transformation. The qubit stored in a trapped rubidium atom can be converted 
back into a photon by reversing the Raman excitation process that occurs during memory 
loading. 



D. Memory Loading Protocol 

The MIT/NU quantum communication system is clocked, with the following memory 
loading protocol being run every cycle. Time slots of signal and idler photons are transmitted 
over optical fibers in the 1.55 yum low-loss window, upconverted to 795 nm, and gated into 
their respective quantum memòries. During a short cavity-loading interval of a few cold- 
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cavity lifetimes, say 400 ns, the àtoms are optically detuned or physically displaced to prevent 
A-to-B absorptions of 795 nm photons. After this loading interval, the àtoms are tuned 
or moved into absorbing positions and the B-to-D transition is coherently pumped for 
100 ns. To test whether each memory has loaded a photon in its D storage levels — without 
destroying the coherences stored therein — we repeatedly drive each atom's A-to-C transition 
and monitor both cavities for fluorescence from these cychng transitions. If it is determined 
that either atom has failed to absorb a 795 nm photon, i.e., if either atom has failed to be 
excited into a superposition of its long-hved D levels, then both àtoms are returned to their 
A states and the loading protocol is repeated. We expect that this memory-loading protocol 
could be run at rates as high as R = 500 kHz, so that we can attempt to load an entangled 
photon pair once every 2 /xs. 



III. TELEPORTATION-SYSTEM ERROR MODEL 

The performance of the MIT/NU architecture was studied in Ref. using a simple 
model that assumes all error events lead to storage of independent random polarizations. 
In this section, we present a more accurate error model, and we discuss the use of quantum 
error correction or entanglement purification to obtain improved system performance. 

Let àfc, k = Sx, Sy, Ix, ly, be the annihilation operators of the optical field modes within 
the quantum memory cavities at the end of a cold-cavity load. It was shown in [|ï| that the 
joint density operator for these modes takes the factored form, psi = Psxiy ® Psyix, where 
the two-mode density operators on the right-hand side are Gaussian mixed states given by 
the anti-normally ordered characteristic functions, 

XT'' iCs, Cl) = tr (p^^.^e-ÍS'^^.-CI'^^.e^^'^^^+^^'^l) (1) 

= exp [-(1 + n){\Cs\' + + 2nRe(C5C/)] , (2) 

and 

XT^ iCs, Cl) = tr [ps,i^e-^s^^y-^^''^e'^<-''^''''^ (3) 

= exp [-{l+n){\Cs\' + IC/H - 2nRe(C5C/)] , (4) 

with n = J_ - J+, n = J_ + /+ and J± = r]LiicG/[TT,{l ±G){1±G + TJT)]. Here: is 
the normalized OPA pump power (G^ = 1 at oscillation threshold); til is the propagation 



loss; 7 and 7c are the output-coupling rates of the OPA and the memory cavities; and F and 
Te are the linewidths of the OPA and memory cavities. The joint density operator for the 
and ly modes can be found from the inverse relation for (0), viz., 

__ / —^Xa {CsXi)e 'ye'-s s.+^i h- (5) 

a similar inverse relation exists for (|^). These expressions will be used to derive an error 
model for our quantum communication system. 



A. Single-Photon Event Model 

In Section |11 D| we described a procedure for nondestructively detecting whether a quan- 



tum memory has absorbed a photon. This procedure allows us to isolate erasure events, 
i.e., loading intervals in which one or both àtoms fail to absorb photons. Erasures reduce 
the throughput, but they do not reduce the teleportation fidelity achieved by the MIT/NU 
architecture. Because OPA sources can produce more than one pair in a loading interval, 
we are not guaranteed that the desired singlet state has been loaded into the two quantum 
memòries when no cycling fiuorescence is detected from either memory during a loading 
interval. Indeed, it is possible that two pairs were emitted by the source, with one photon 
from the first pair being lost en route down one fiber, and one photon from the second pair 
being lost while in propagation down the other fiber. In this situation, the two àtoms may 
not be placed in a singlet state, hence an error may be incurred in subsequent a teleportation 
procedure that uses the coherences that get stored in these àtoms. The cold-cavity loading 
analysis presented in calculated the erasure probability, i.e., the probability that one or 
both of the memory cavities failed to absorb a photon after a trial of the loading protocol, 
and the success probability, i.e., the probability that the two memory cavities share a singlet 
state after a trial of the loading protocol. All other possibilities were considered to be errors, 
and assumed to leave the memòries in independent states of random polarization. Inasmuch 
as it is possible — in the cold-cavity loading analysis — for one or both of the memory cavities 
to absorb more than one photon, the error probability calculated in |]ï| includes multiphoton 
errors, i.e., error events in which both memory cavities absorb photons with at least one of 
them absorbing two or more photons. We now show how these multiphoton events can be 
eliminated from the error event. 
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FIG. 5: Conversion of multiphoton events into erasures. Beam splitter arrays are used to achieve 
a 1:K fanout at the far end of each optical fiber. The K outputs from each array are connected 
to single-rubidium atom quantum memòries. An erasure is declared unless exactly one memory at 
each end has loaded a photon. 

Consider the configuration shown in Fig. ^ Here, múltiple memòries convert multiphoton 
events into erasures. We use beam-splitter arrays to achieve 1:K equal-splitting fanouts at 
the far end of each optical fiber. The K outputs from each array are connected to K 
single-rubidium atom quantum memòries. During each loading interval, all of the quantum 
memòries are monitored for A-to-C fiuorescence. An erasure is declared — and the memory 
loading protocol is repeated — unless exactly one memory at each end has absorbed a photon. 
In the limit of large K, this scheme converts all multiphoton events into erasures. The only 
loading events that remain are those in which a single photon entered exactly one of the 
memòries at each end of the quantum communication system. These loaded memòries are 
then the pair that is used to perform teleportation. An error now occurs when the two 
loaded memòries are not in the singlet state. Because only one photon was absorbed at 
each memory, all possible loading events can be represented in the Bell basis, {\iP^)tr = 
(|0)T|l)fí ± \1)t\0)r)/V2, |0±)tíï = (|1)t|1)íí ± |0)T|0)fí)/v^}, where 

|0)t = 11)5.10)5, and |l)^^|0)5jl)5„ (6) 
|0)/? = |1)/J0)7, and |1)^^|0),J1),^, (7) 

define the logical qubits at the transmitter and the receiver in terms of their respective 
cavity-field-mode states. We shall characterize the joint density operator for single-photon 
loading events by finding closed-form expressions for its Bell-basis matrix elements. 

We first compute the diagonal entries of the density matrix. The probability of loading 
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the singlet state \ip )tr is, 



Pr(|V^ )tr) = tr{^ \psi\^ )tr 
1 



(8) 



{s.Iy (00|P5./J00)5^/^ 5^/^ (ll|p5^7jll) 



where 



- S^Iy{^^\PS:,Iy\^^) S^Iy S y I {^^P Sy I :,\^^) S yl ^ 

- S^Iy{^^PS:,Iy\^^) S^Iy SylÀ^^\PSyI:,\'^'^) Syl^) 

= POOPU + Pc, 

POO = S.Iy{00\pS^Iy\00)s^Iy = SylA^^\PSyljOO)SyI,, 
PU = S.Iy 

^ 1 1 I P I 1 1 ) Sx ly Sy Ix^^^IP Sy Ix I ) Sy Ix ' 



Pc 



\s^Iy{^^\pS^Iy\'^'^) S^Iy\ 



\SyI'^ 



mpSylM)Sylf. 



(9) 
(10) 

(11) 

(12) 
(13) 



with the second equalities in Eqs. (|rTp-(^) foUowing from comparing the anti-normally 
ordered characteristic function for the {Sx.Sy} modes to that for the {I^^Iy} modes. A 
similar calculation for the probabihties of the triplet states shows that, 



where 



Pr(|V''^)rfí) = PmPii - Pc 
m<P~)TR) = PÍo, 
Pr(|0+)Tfí)=p?o, 

PlO = |5:^/y(lO|p5^/j^|lO)5^/aP = is^Iyi^MPS^Iyl^'^) S:,Iy\ 



(14) 
(15) 
(16) 



|5,/.(10|P5,7J10) 



Sy Ix 



|5,/.(01|P5,/J01)5, 



(17) 



To evaluate {^00,^10,^11,^0}, we parallel the technique used in [|ï| for computing similar 
quantities. We observe that 



Xa 



(l + n)2-n2' (1^) 
where Ps^/j,(C) is the classical probability density for a zero-mean, complex- valued Gaussian 
random vector = [(s Ci] with second-moment matrices 

1 + n 



1 



1 + n 



(19) 
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and 



(CC )pSxIv 



1 



'1 + nY — 



n 
n 



Using the inverse relation (|^) for the density operator, we find: 



POO = 5./,(00|p5./JOO)5,/, 



(1 + ny — n 



(1 + ny — 



(20) 



(21) 



and 



PlO — S^Iy{^0\PS^Iy\'^0)s^Iy 



1 - {\Cs?)pS^Iy 

(1 + nY — 'h? 

n(l + n) — fY 
[(l + n)2-n2]2' 



[l-\Cs?)Ps.iM) 



[(1 +n)2 -n2]3 



Pc 



\s^Iy{^^\PS:,Iy\^^) S^Iy\ 



d\sd\i 
1 + n}^ — n 

2 



nY 



■^CsClPS^JyiC) 



:i + n)2 -n2 



77,2 



[(1 + 77)2 - n2]4 



(22) 
(23) 
(24) 



pn = s.iy{n\ps.iy\n)s.iy = jj ^^^^^2^^ ' l l^) ( 1 ' 10^)^5.7,(0 (25) 

^ ((i-|GP)(i-|OP)W, 

(1 + 77)2 _ ^2 

{n{l + n) - fYY + fY ^^^^ 



(28) 
(29) 
(30) 



Equation ( pT]) follows from the moment factoring theorem for complex-valued Gaussian 
random variables. The off-diagonal entries of the density matrix are computed in the same 
way, and it turns out that they are all zero. (See Ref. for detalls of these calculations.) 
Note that we can verify from the expressions above that PooPii ~ Pc = Piq, i-e., the triplet 
state probabilities are all equal. 

Normalizing the preceding matrix elements to set tr{pTR) = 1, we obtain the conditional 
density operator for single-photon loading events given that an erasure did not occur. This 
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FIG. 6: Figures of mèrit for the MIT/NU teleportation architecture. Left panel: singlet-state 
throughput versus end-to-end path length. Right panel: average teleportation fidelity versus end- 
to-end path length. Both panels assume the following operating conditions: dual-OPA source 
[Fig. §(b)] with each OPA operated at 1% of its oscillation threshold {G^ = 0.01); 5dB of excess 
loss in each P-to-M block path in Fig. |ï|; 0.2 dB/km loss in each fiber; Fc/F = 0.5 ratio of memory- 
cavity linewidth to source-cavity linewidth; and R = 500 kHz memory cycling rate. 

conditional density operator for the Fig. ^ architecture is diagonal in the Bell basis, and 
given by, 

PTR = diag[p, (1 - P,)/3 (1 - P,)/3 (1 - P,)/3] , (31) 

where Pg = [{n{l + n) — nY + 2fí^]/[4(fi(l + n) — n)^ + 2n^], is the conditional probability 
of loading a singlet given there has not been an erasure, i.e., it is the conditional success 
probability. Equation ( |3TD is a \iP~)tr Werner state, so that teleporting the message qubit 
Pm from transmitter T to receiver R using the entangled mixed state p^R is equivalent to 
transmitting pm over a depolarizing quantum channel of fidelity P^. The average telepor- 
tation fidelity F realized with the Bennett et al. protocol, assuming the input qubit is a 
random pure state chosen from a uniform distribution over the Bloch sphere, is easily shown 
from ptr to be, 

F = (2P, + l)/3. (32) 



The key figures of mèrit for our teleportation system are its singlet-state throughput and 
its average teleportation fidelity. The throughput is the average number of successful singlet- 
state loadings per second, N^^^cess = -RPr(?/'"), when the memory protocol is run at rate 
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R and a lattice of Fig. |^ li/í-fanouí quantum memòries is available for sequential loading 
at both the teleportation transmitter and receiver. In Fig. ^ we have plotted these figures 
of mèrit versus the end-to-end path length between the transmitter and the receiver under 
the following operating conditions: dual-OPA source [Fig. ^(b)] with each OPA operated 
at 1% of its oscillation threshold (G^ = 0.01); 5dB of excess loss in each P-to-M block 
path in Fig. 0.2 dB/km loss in each fiber; Fc/F = 0.5 ratio of memory-cavity hnewidth to 
source-cavity hnewidth; and R = 500 kHz memory cychng rate. We see from this figure that 
a throughput of nearly 200pairs/sec is achieved at an end-to-end path length (2L) of 50 km 
with an average teleportation fidelity in excess of 97%. In the remainder of this section, 
we explore the use of quantum error correction or entanglement purification to increase the 
average teleportation fidelity shown in Fig. 



B. Quantum Error-Correcting Codes 

An [[n, k, t]] quantum error correcting code is a mapping from k logical qubits to n physical 
qubits, with k < n, such that if t or fewer single-qubit errors occur on the physical qubits 
then we can recover the original logical qubits perfectly. A [[5, 1, 1]] code that saturates 
both the quantum Hamming bound and the quantum Singleton bound was discovered by 
Lafiamme et al. |TÏ[|. It uses the following codewords, 



|0i) = lOOOOO) + lOOllO) + loiooi) + loiiu) 

+ IIOIOI) - llOOll) + IlllOO) + IllOlO), (33) 
= -|00101) - lOOOll) + lOllOO) - lOlOlO) 

- IIOOOO) + IIOIIO) + IllOOl) + llllll). (34) 



Aung has shown [|I^] that employing this five-qubit code in the MIT/NU teleportation 
architecture results in a depolarizing channel whose average teleportation fidelity satisfies, 

F=(2P; + l)/3, (35) 

where 

= (5 + 20P, - 70P^ + AOP^ + 160P,^ - 128P,^) /27, (36) 
gives the conditional probability of singlet loading after quantum error correction. 
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FIG. 7: Figures of mèrit for the MIT/NU teleportation architecture with and without use of the 
five-qubit quantum error-correcting code (QECC). Left panel: normalized throughput, Aí'success/?^) 
versus end-to-end path length. Right paneh average teleportation fidelity versus end-to-end path 
length. Both panels assume the same operating conditions as in Fig. |6|. 

Figure compares the performance of the teleportation system when the five-qubit quan- 
tum error-correcting code (QECC) is employed to the uncoded performance of this same 
system. The operating parameters that are assumed are the same as in Fig. ^. The left 
panel shows the normalized throughput, Aí'success/'^, versus end-to-end path length, where n 
is the number of pairs used to teleport a single message qubit. Because the uncoded system 
employs n = 1 whereas the Lafiamme et al. code requires n = 5, this panel shows a factor- 
of-five difference between the normalized throughputs of the uncoded and coded systems. 
The right panel of Fig. |^ plots average teleportation fidelity versus end-to-end path length. 
This panel shows the benefit of using the 5-qubit code: F > 0.99 is now achieved out to a 
100 km end-to-end path length. 

Further improvement in teleportation fidelity can be achieved by encoding each five- 
qubit codeword using the five-qubit code. The result is a [[n = 25, k = l,t = 3]] code, which 
indicates that we have lost a factor of 25 in throughput to obtain the ability to correct all 
qubit errors of order 3 or lower. Although we could continue to improve teleportation fidelity 
in this way, it is clearly preferable to consider quantum codes with larger block lengths that 
have better minimum distance properties. Instead, we shall explore an alternative — albeit 
closely related — technique known as entanglement purification. 
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C. Entanglement Purification Protocols 

An entanglement purification protocol (EPP) is a series of local operations on n entan- 
gled pairs designed to sacrifice n — moí these pairs in order to increase the fidelity of the m 
remaining pairs. These protocols require classical communication between locations sliaring 
these pairs to coordinate the local operations, i.e., communication between the transmit- 
ter and receiver of our teleportation architecture. In the limit of large block size n, some 
protocols produce a finite number m < n oí near-perfect singlets. The yield of an entan- 
glement purification protocol is defined as D = m/n. Given a large number of entangled 
pairs and protocol of yield D, we can use the resulting near-perfect singlets for high-fidelity 
teleportation. 

Bennett et al. proposed a one-way hashing EPP |jÏ2|. For n ^ oo initial entangled pairs, 
with each pair in state p, they showed that the yield of their one-way hashing protocol is 
D = 1 — S{p) ideal singlets, where S{p) = — tr[/3 log2(p)] is the von Neumann entropy of p. 
The MIT/NU architecture loads pairs that are in the Werner state Eq. (|3Ï|) , so if n ^ 1 
pairs are stored and the one-way hashing protocol is used we will get Dn perfect singlets 
where, 

D = l + Ps log2(P.) + (1 - Ps) log2[(l - Ps)/3]. (37) 

as plotted in the top panel of Fig. |[ The yield is positive only if the conditional success prob- 
ability satisfies Pg > 0.811. The uncoded MIT/NU architecture easily meets this threshold 
out to 100 km end-to-end path length. 

The lower panels in Fig. § compare the performance of the MIT/NU teleportation archi- 
tecture with and without the use of the one-way hashing EPP. The bottom left panel shows 
normalized throughput, DNsuccess, versus end-to-end path length, i.e., it plots the number 
of pairs/sec that will be available for teleportation purposes after a jield-D purification 
procedure has been employed, where D = 1 when no purification protocol is employed. Be- 
cause the MIT/NU architecture's initial fidelity is quite high, the one-way hashing protocol 
has a high yield, so that throughput lost by virtue of employing this EPP is quite modest. 
However, because this EPP distills perfect singlets — and because our performance analysis 
assumes perfect Bell-state measurements at the transmitter and perfect qubit lògic at the 
receiver — the average teleportation fidelity with this protocol is unity, as shown in the bot- 
tom right panel of Fig. |[ There is a substantial drawback, however, of the hashing protocol 
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FIG. 8: Figures of mèrit for the MIT/NU teleportation architecture with and without use of the one- 
way hashing entanglement purification protocol (EPP). Top panel: EPP yield versus conditional 



success probability, Pg. Bottom left panel: normalized throughput, DA'success! versus end-to-end 



path length. Bottom right panel: average teleportation fidelity versus end-to-end path length. All 



three panels assume the same operating conditions as in Fig. 



as compared to the much simpler five-qubit QECC: the EPP requires enormous amounts of 
quantum memory at the transmitter and the receiver to realize the large block sizes needed 
for validating use of the asymptotic yield expression D = 1 — S{p). 



IV. GHZ-STATE COMMUNICATION 

There is considerable interest in Greenberger-Horne-Zeilinger (GHZ) states [JÏ3[, because 
they can be used in a non-statistical disproof of local hidden-variable theories of physics 
and as resources for multiparty quantum communication protocols such as quantum secret 
sharing As discussed in |ï|, the MIT/NU teleportation architecture has an extension 
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FIG. 9: Schematic of long-distance GHZ communication system. GHZ = source of polarization- 



entangled photons from either the left or right panels of Fig. |10|; L = L km of Standard telecom- 
munications fiber; M = trapped-atom quantum memory. 



that permits long-distance transmission and storage of three-party GHZ states, 



IV'GHZ) = (|000) + |111 



(38) 



see Fig. 1^. In this section, we present the single-photon loading event model for the GHZ- 
state quantum communication system, and we use our model to quantify the performance 
achieved in quantum secret sharing. 



A. GHZ-State Systems 

The GHZ system in Fig. ^ is run under a clocked loading protocol similar to the one de- 
scribed for singlet-state transmission. We employ quantum-state frequency conversion and 
time-division multiplexing polarization restoration to ensure that this GHZ-state quantum 
communication system is compatible with transmission over Standard telecommunications 
fiber. We consider two possible source arrangements for the GHZ block in Fig. ^ The first 
is an ultrabright, narrowband variant of the source used by Bouwmeester et al. in an initial 
experimental demonstration of GHZ-state generation [|ï^. That experiment was an anni- 
hilative table-top measurement and had extremely low flux: 1 GHZ state every 150 sec. Our 
version of the Bouwmeester et al. source — shown in the left panel of Fig. |T0| — replaces their 
parametric downconverter with a pair of doubly-resonant, type-II phase matched degenerate 
optical parametric amplifiers (DPAs). With this source, it was shown in that the Fig. |^ 
arrangement permits a throughput comparable to what Bouwmeester et al. produced in the 
laboratory to be realized at a source-to-memory radius of 10 km. More important, though, 
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FIG. 10: Source arrangements for the GHZ-state communication architecture in Fig. |9|. Left panel: 
dual-DPA GHZ system. The quantum memory in this figure representa a memory internal to 
the source block in Fig. |9|; its loading is used as a trigger signal, see for details. Right panel: 
heralded single-photon source plus DPA system. PBS = polarizing beam splitter, A/2 = half-wave 
plate. 

is the fact that the memòries in the Fig. |^ architecture allow the GHZ state to be stored for 
use in applications of three-party entanglement. 

Recent work has shown that it may be possible to construct heralded single-photon 
sources [|Ï6|. With such a source, we can design a GHZ system with a substantially higher 



throughput than the configuration discussed above In the right panel of Fig. |IÜ|, the 
heralded source places a single photon in the proper spatio-temporal mode for coupling to 
the trapped-atom quantum memory during each loading cycle. With the heralded-plus-DPA 
GHZ source, throughput rises by three orders of magnitude over the dual-DPA system, to 
about 15 GHZ states/sec at a 10 km source-to-memory radius. 



B. Single-Photon Event Models 

In this section, we present the single-photon loading event models for the dual-DPA 
and heralded-plus-DPA GHZ-state quantum communication systems. We assume that each 
memory shown in Figs. ^ and ^ contains a l:ií-fanout array, as in Fig. |^. Consequently, 
we will only consider single-photon loading events at each memory in Figs. ^ and |T^. Let A, 
B, and C represent a clockwise labeling of the memòries in Fig. ^ starting from the lower 
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left. We define the computational basis for these quantum memòries to be, 



|0)a = 


|01)a.a. 


and 


|1)a = 




|o)b = 




and 


|1)b = 




\0)c = 


|10)c.c. 


and 


|l)c = 


|01)c.c. 



(39) 
(40) 
(41) 

in terms of the number-ket representations for the x- and í/-polarized photons that loaded 
these memòries. With this computational basis, the GHZ state loaded by the Fig. ^ system 
is \iPgïiz)abc = {\000) ABC +\in)ABc)/V2. 
It is not hard, using the basis, 

j^ lOOO) ABC ±^ni) ABC ^ |001)^sc, \mABC, \010)abc, \101)abc, m)ABC, |100)^bc} , 

(42) 

to compute the matrix elements of the joint conditional density operator for memòries A, 
B, and C, given that an erasure has not occurred. The derivation foUows the approach that 
was used for the teleportation architecture in Section |111 A| , so we shall omit the detalls and 



just state the final results. The conditional density matrices for both the dual-DPA GHZ 
system and the heralded-plus-DPA GHZ system turn out to be diagonal in the Eq. ( ^2]) 
basis. For the dual-DPA source we find that, 

PABC = diag(p^^ Pel, Pel, Pel, Pel, Pe2, Pe2,) , (43) 

where 

P A\A-^2n-) 

7^4 + 12^2^2+^4' ^^^^ 



^2(^2 + 



Pe2, 7^4 + 12^2^2 +f^4' (^6) 

with A = n{l + n) — n'^ . For the heralded-plus-DPA source we get, 

PABC = dÍag(Pc^ Pel, Pel, Pe2, Pe2, o) , (47) 



19 



where 



í7(3A2 + n2) [(1 + n)2 _ ^2] + 2(1 - r])A{A^ + 2n^) ' 

riA^[{l + nf - n^] 
7]{3A'^ + n2) [(1 + n)2 - ^2] + 2(1 - r])A{A^ + 2Ü^) ' 

(1 - 7])A{A^ + 2n2) 



(48) 
(49) 



r/(3A2 + n2) [(1 + ny _ ^2] + 2(1 - r])A{A^ + 2n^) ' 

In calculating these matrix elements we have used the same transmission loss factor, ri 
VlIIcI^^ci for each source-to-memory path in Figs. P and [TO. 



(50) 



C. Performance Analysis 

Secret sharing refers to cryptographic protocols which allow Alice to share secret informa- 
tion witli Bob and Charlie in sucli a way that individually tliey have no means for learning 
Alice's secret, but by working together can they gain access to Alice's secret Information. 
One classical implementat ion of secret sharing requires Alice to send a random bit string 
r to Bob and the modulo-2 sum, r © m, of the random bit string r and her message m to 
Charlie. If Bob and Charlie act together, they can recover Alice's message m simply by 
adding their bit strings together. 

We consider the performance of our GHZ systems in the quantum secret sharing (QSS) 
protocol proposed in Ref. fï^. In this protocol, Alice, Bob, and Charlie share a GHZ state 
|^ghz)aí?c = (|000)abc·+|111)aí?c)/V2, and Alice's secret is the qubit \i))s = a\0)s+P\l)s, 
which she wishes to send to Bob and Charlie in such a way that they must cooperate to 
obtain this quantum Information. The joint state of Alice, Bob, and Charlie — including 
Alice's portion of the GHZ state and her quantum secret — at the start of the QSS protocol 

is \lp)s\lpGHz)ABC- 

Alice initiates the QSS protocol by making the Bell-state measurements, 
{\4''^)sA, \4>'^)sa}, on her secret and her portion of the GHZ state. Alice then labels 
{m,n), the two classical bits she derives from these measurements, using the following 
scheme: ip'^ = (0, 1),^^" = (1, 1), 0^ = (0, 0), 0^ = (1,0). She sends m to Bob and m © n 
to Charlie, using secure classical channels so that Bob cannot intercept m (B n and Charlie 
cannot obtain m. It foUows that neither Bob nor Charlie has any Information about Alice's 
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secret — even after receiving the classical information from Alice — because their marginal 
density operators can be shown to be pb = ÏbI'^ and pc = /c/2, respectively, where / is 
the identity operator, at this point in the protocoL 

For Bob and Charhe to learn Ahce's secret qubit l'?/')^, they must cooperate. Because the 
no-cloning theorem precludes making two copies of this state, either Bob or Charhe — but 
not both of them — wiU possess a rephca of \ip)s at the end of the QSS protocoL Let us 
arbitrarily assume that Bob and Charhe have agreed to let Charlie be the recipient of this 
replica. Having made that agreement, Bob measures his portion of the GHZ state in the x 
basis, {|±x)b = (|0)b± \1)b)/V^}, and he sends Charlie the result of this measurement 
along with Alice's m bit. Together with Alice's m © n — which he received earlier — Charlie 
now has all the information he needs to turn his portion of the GHZ state into a replica of 
Alice's secret via a local unitary operation. 

Let F be the average fidelity of the preceding QSS protocol when Alice's secret, \4')s, is 
selected from a uniform distribution over the Bloch sphere. From our single-photon event 
models, it can be shown that the average QSS fidelity for the dual-DPA GHZ system is, 

F = PG, + 2Pel,+2Pe2,/3, (51) 

and the average QSS fidelity for the heralded-plus-DPA GHZ system is, 

F = Pg,+2P,,J3 + P,2,. (52) 
Quantum error correction can be used to improve the performance of the QSS protocol. 



For the five-qubit error-correcting code from ||TÏ|] we used simulations to calculate the QSS 



performance of our GHZ systems. Figure |ïï| shows the average QSS fidelity for the dual-DPA 
and heralded-plus-DPA GHZ systems with and without coding. We see that the heralded- 
plus-DPA GHZ system has significantly better performance than the dual-DPA system in 
the QSS protocol in both uncoded and coded operation. Coding improves the performance 
of the heralded-plus-DPA system for all path lengths shown in this figure, but beyond about 
16 km source-to-memory path length coding reduces the fidelity of the dual-DPA system. 
The dual-DPA curves with and without error correction cross because the five-qubit code 
degrades performance when the incidence of multi-qubit errors is too high; the same thing 
occurs for the heralded-plus-DPA system, but at a much longer path length. 
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FIG. 11: Average fidelity in the QSS protocol. We compare the performance of the dual-DPA and 
heralded GHZ systems with and without coding. These plots assume each DPA operates at 1% of 
its oscillation threshold, 5dB excess loss in each source-to-memory path, 0.2 dB/km loss in each 
fiber, and Tc/T = 0.5 ratio of memory-cavity linewidth to source-cavity linewidth. 

V. CONCLUSIONS 

We have reviewed the MIT/NU quantum communication architecture for long-distance, 
high-fidelity qubit teleportation and developed the single-photon loading event model for 
this system. Using this model, we have quantified the fidelity improvements offered by a 
simple quantum error-correcting code, and by a powerful entanglement purification protocol. 
The MIT/NU architecture has an extension that enables long-distance transmission and 
storage of Greenberger-Horne-Zeilinger states; we have derived the single-photon loading 
event model for this system too and examined its performance with and without the use of 
a simple quantum error-correcting code. 
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